Apple iOS Webkit Memory Corruption Vulnerability (CNVD-2015-06147)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

The vulnerability of Safari browser and iOS operating system allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a specially crafted web page...

Microsoft Internet Explorer CVE-2015-2483 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in further...

Microsoft Internet Explorer CVE-2015-2492 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2015-2484 Tampering Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security bypass vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by using a specially crafted web page...

Microsoft Internet Explorer and Edge CVE-2015-2542 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently...

Microsoft Internet Explorer CVE-2015-2498 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2015-2541 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by using a specially crafted web page...

Google Chrome OpenJPEG Memory Misreference Vulnerability

Google Chrome is a WEB-based browser. A memory misreference vulnerability in the opjj2kcopydefaulttcpandcreatetcd function in j2k.c in OpenJPEG used in Google Chrome PDFium allows remote attackers to construct a malicious WEB page, which can be tricked into parsing by the user, and can crash the...

Microsoft Releases Critical Security Update for Internet Explorer

Microsoft has released a critical security update to address a vulnerability in Internet Explorer. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system if the user views a specially crafted webpage. Users and administrators are encouraged to revie...

Microsoft Internet Explorer CVE-2015-2448 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2015-2443 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer and Edge CVE-2015-2442 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently...

Discuz!后台秒getshell（第三方安全问题）

简要描述： Discuz!后台再严，经不住第三方放水,不禁在想discuz插件那么多，漏洞补得完吗 详细说明： 最近github各种Discuz后台弱口令，于是自己下载了一个discuzx3.2应该是最新版了，后台各种找啊，没找到bug，就在要放弃的时候，一个插件，起死回生。 漏洞证明： 1.后台找到应用，插件 2.有一个好贷站长联盟 3.安装之后有一个导入接口信息 4.然后导入接口信息 5.接口信息会放到这里 6.然后就shell了 img src="https:/...

Oracle Data Quality Trillium Based SetEntities Type Confusion (CVE-2015-0444)

A remote code execution vulnerability exists in Oracle Data Quality TSS12.LoaderWizard.lwctrl ActiveX control. The vulnerability is due to a type confusion when handling data passed to SetEntities. A remote attacker can exploit this vulnerability by enticing a user to access a maliciously crafted...

How to Hack Millions of Android Phones Using Stagefright Bug, Without Sending MMS

Earlier this week, security researchers at Zimperium revealed a high-severity vulnerability in Android platforms that allowed a single multimedia text message to hack 950 Million Android smartphones and tablets. As explained in our previous article, the critical flaw resides in a core Android...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the JScript 9 component in the Internet Explorer browser is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a specially crafted web page...

Unspecified vulnerability in Oracle MySQL Server:Security:Privileges component (CNVD-2015-04714)

Oracle MySQL Server is a relational and popular database. A security vulnerability exists in the Server:Security:Firewall subcomponent of Oracle MySQL Server, which can be exploited by remote attackers to construct a malicious WEB page and trick users into parsing it, which can impact system...